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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1. (Canceled) 

2. (Currently Amended) An information sharing apparatus, which 
communicates with at least one terminal corresponding to one of users, comprising: 

an acquiring unit configured to acquire an information item wh i oh i nc l ud e s 
including an image of a person p e r s en L s- f a e e; 

an extracting unit configured to extract a contour of the a person’s face from the 
information item, to detect the an image of the person’s face as a personal information 
item; 

a generating unit configured to generate an anonymous information item by 
d ele t i ng th e p e rsona l informat i on i t e m from th e i nformat i on i t e m separating the detected 
personal information item from the information item, to obtain (a) the anonymous 
information item which is the information item including the information item except the 
image of the person’s face and (b) the personal information item corresponding to the 
image of the person’s face; 

an encrypting unit configured to encrypt the personal information item; 

a first storing unit configured to store the encrypted personal information iten\ 
the anonymous information item , and one of a plurality of levels which corresponds 
to the personal information item, the levels including (a) a first access level which is 
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assigned to a first group of users of the users who can access only the anonymous 
information item out of the anonymous information item and the personal information 
item and (b) a second access level which is assigned to a second group of users of the 
users who can access both of the anonymous information item and the personal 
information item ; 

a s e cond sto rin g -u n i t -c onf i gur e d te -s tor e-a f i rst a cc e ss l e v el wh i ch i s ass i gn e d to 
a f i rst group of us e rs of th e us e rs who can a cc e ss on l y th e anonymous i nformat i on -i t e m - 
out of th e anonymou s i nformat i on it e m and th e p e rson a l i nformat i on i t e m, and to stor e a 
s e cond a c c e ss -le v el- wh i eh -is-a s si gn e d - t e-a-se Gond - group of us e rs of th e u se rs who can 
a cc es s both of th e anonymous i nformat i on i t e m and th e p e rsona l i nformat i on i t e m; 

a receiving unit configured to receive a request message for accessing the 
information item, the request message being transmitted from the terminal; 

a first transmitting unit configured to transmit only the anonymous information 
item out of the anonymous information item and the personal information item to the 
terminal in response to the request message, when an access level predetermined to 
the one of the users is equal to the first access level; 

a synthesizing unit configured to synthesize the personal information item with 
the anonymous information item[[,]] to obtain a regenerated information item including 
the image of the person’s face : and 

a second transmitting unit configured to transmit the regenerated information 
item in response to the request message, when the access level of the one of the users 
is equal to the second access level. 
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3. - 7. (Canceled). 

8. (Currently Amended) An apparatus according to claim 2, further 
comprising a tWfd second storing unit configured to store a pair of IDs of e ach of th e 
p e rsona l i nformat i on i t e m and th e anonymous i nformat i on i t e m , one of the pair 
corresponding to the personal information item and the other of the pair corresponding 
to the anonymous information item; 

wherein the synthesizing unit includes: 

a second acquiring unit configured to acquire the one ID of the pair, based on 
anoth e r I D the other of the pai r, th e anoth e r I D corr e spond in g - to th e anonymou s 
i nformat i on i t e m ; and 

a third acquiring unit configured to acquire the personal information item which 
corresponds to the one 4© of the pair and is to be synthesized with the anonymous 
information, from the first storing unit. 

9. (Currently Amended) An apparatus according to claim 2, wherein the 
generating unit generate the anonymous information item by overwriting into an area 
corresponding to the personal information item with [[in]] arbitrary symbols. 

10. (Canceled). 

1 1 . (Currently Amended) A method for sharing acquired information items 
with a plurality of terminals corresponding to a plurality of users respectively, 
comprising: 
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acquiring an information item wh i ch i nc l ud e s including an image of a person 
pe r s on’s f a c e; 

extracting a contour of the a_person’s face from the information item, to detect 
the an image of the person’s face as a personal information item; 

generating an anonymous information item by d ele t i ng th e- p e r s on al i nform a t i on 
i t e m from th e i nformation i t e m separating the detected personal information item from 
the information item, to obtain (a) the anonymous information item which is the 
information item including the information item except the image of the person’s face 
and (b) the personal information item corresponding to the image of the person’s face ; 

encrypting the personal information item ; 

storing , in a first memory, the encrypted personal information item A and the 
anonymous information item i n a f i rst m e mory d e v i c e , and one of a plurality of levels 
which corresponds to the personal information item, the levels including (a) a first 
access level which is assigned to a first group of users of the users who can access 
only the anonymous information item out of the anonymous information item and the 
personal information item and (b) a second access level which is assigned to a second 
group of users of the users who can access both of the anonymous information item 
and the personal information item ; 

stor i ng a f i rst acc e ss le v el wh i ch i s ass i gn e d to a f i rst group of us e rs of th e - u se rs - 
who can as se s s on l y th e anonymous i nformat i on i t e m out of th e anonymous i nformat i on 
i t e m and th e p e rson al inform a t i on - i t e m, and a s e cond acc e ss le v el wh i ch i s ass i gn e d to 
a s e oond group of us e rs of th e- us e r s who can acc e ss both of th e anonymous 
i nformat i on i t e m a nd th e p e rson al i nformat i on i t e m; 
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receiving a request message for accessing the information item, the request 
message being transmitted from one of the plurality of terminals; 

transmitting only the anonymous information item out of the anonymous 
information item and the personal information item to the one of the plurality of terminals 
t e rmina l in response to the request message, when an access level pr e d e t e rm i n e d to of 
one of the plurality of users who corresponds to the one of the plurality of terminals is 
equal to the first access level; 

synthesizing the personal information item with the anonymous information item, 
to obtain a regenerated information item including the image of the person’s face ; and 
transmitting the regenerated information item in response to the request 
message, when the access level of the one of the users is equal to the second access 
level. 



12.-15. (Canceled). 

16. (Currently Amended) A method according to claim 1 1 , further comprising: 
storing , in a second memory, a pair of IDs of e ach of th e p e rson at-i nferm a t ie n - 
i t e m -a nd - th e-a nonymou s i nform a t i on -i t e m -i n -th e- th i rd - m e mory - d e v i c e, one of the pair 
corresponding to the personal information item and the other of the pair corresponding 
to the anonymous information item; 

wherein the synthesizing includes: 

acquiring the one 1© of the pair, based on anoth e r I D the other of the pai r, th e 
a noth e r I D corr e spond i ng te - th e anonymous i nformat i on i t e m ; and 



- 6 - 




PATENT 

Attorney Docket No. 04329.3164 



acquiring the personal information item which corresponds to the one ID of the 
pair and is to be synthesized with the anonymous information, from the first memory 
d e v i c e. 

17. (Previously Presented) A method according to claim 1 1 , wherein the 
generating generates the anonymous information item by overwriting into an area 
corresponding to the personal information item with arbitrary symbols. 
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